cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2129
Views
0
Helpful
15
Replies

Ping through the Firewall

beaujoire
Level 1
Level 1

Hi,

I've received my ASA5510 and i'm trying to allow Ping through the Firewall between DMZ-LAN and LAN-DMZ

I use:

access-list "ICMP_LAN" permit icmp,echo,echoreply  any any

access-list "ICMP_DMZ" permit icmp,echo,echoreply  any any

I applied the access-list in each interface :

access-group ICMP_LAN permit in interface LAN

access-group ICMP_DMZ permit in interface DMZ

But it doesnt work , Packet tracert report that the packet is dropped by the default ACL which Deny All Traffic.

Any Ideas? Thanks

15 Replies 15

So, does this work now?

static (LAN,DMZ) 172.16.1.0 172.16.1.0 net 255.255.255.0

and

NAT (LAN) 0 access-list LAN_nat0_outbound

The above two are the same.

-KS

Review Cisco Networking for a $25 gift card